Fix print statement in qcom-geni-serial driver in Linux Kernel
Summary
GSD-2022-1005202: tty: serial: qcom-geni-serial: Fix %lu -> %u in print statements. Affects Kernel versions >= b820594fba897f4d4ad424819b2c24cc6202454a, < 4971147c532464896e02631cc29082725499cfe0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The qcom-geni-serial driver is a component of the Linux Kernel that provides support for Qualcomm General Interface (GENI) based serial ports. These serial ports are commonly found in Qualcomm Snapdragon SoCs and are used for communication with external devices. The driver enables the functionality of these serial ports, allowing data transmission and reception. However, a vulnerability has been identified in the driver's print statements, which can lead to potential security issues.
Vulnerability Detail
The vulnerability in the qcom-geni-serial driver lies in the incorrect use of format specifiers in print statements. Specifically, the driver uses the incorrect format specifier '%lu' instead of '%u' in certain print statements. This can result in the printing of incorrect values or memory corruption when the driver is used. An attacker may be able to exploit this vulnerability to obtain sensitive information or execute arbitrary code in the context of the kernel. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix provided in the Linux Kernel update.
Conclusion
The qcom-geni-serial driver in the Linux Kernel is vulnerable to a print statement issue, which can potentially lead to security vulnerabilities. It is recommended to update to Linux Kernel version v5.19.2 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The qcom-geni-serial driver is a component of the Linux Kernel that provides support for Qualcomm General Interface (GENI) based serial ports.
The impact of this vulnerability is not yet proven. However, it has the potential to allow an attacker to obtain sensitive information or execute arbitrary code in the context of the kernel.
To fix this vulnerability, you need to update the affected print statements in the qcom-geni-serial driver to use the correct format specifier '%u' instead of '%lu'. This fix has been implemented in Linux Kernel version v5.19.2.
No, there is no specific workaround available for this vulnerability. It is recommended to apply the fix provided in the Linux Kernel update.
You can find more information about this vulnerability in the Open Source Vulnerability database entry GSD-2022-1005202.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
